Auth bypass in Weidmueller Ie-sw-pl10m-3gt-7tx
CVE-2025-41651
Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system c…
Vulnerability class: Broken Authentication
EPSS: 0.003 (56.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Weidmueller Ie-sw-pl10m-3gt-7tx — versions 0.0.0
- Weidmueller Ie-sw-pl10mt-3gt-7tx — versions 0.0.0
- Weidmueller Ie-sw-pl16m-16tx — versions 0.0.0
- Weidmueller Ie-sw-pl16mt-16tx — versions 0.0.0
- Weidmueller Ie-sw-pl18m-2gc-16tx — versions 0.0.0
- Weidmueller Ie-sw-pl18mt-2gc-16tx — versions 0.0.0
- Weidmueller Ie-sw-vl05m-5tx — versions 0.0.0
- Weidmueller Ie-sw-vl05mt-5tx — versions 0.0.0
- Weidmueller Ie-sw-vl08mt-5tx-1sc-2scs — versions 0.0.0
- Weidmueller Ie-sw-vl08mt-6tx-2sc — versions 0.0.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-41651?
- CVE-2025-41651 is a critical-severity vulnerability in Weidmueller Ie-sw-pl10m-3gt-7tx, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2025-05-27.
- How severe is CVE-2025-41651?
- Critical severity. CVSS v3 base score is 9.8 out of 10.